Confidently Practice Online with Free CCAK Exam Cram

Practice your Certificate of Cloud Auditing Knowledge certification test with free CCAK exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CCAK exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Cloud Security Alliance CCAK exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which of the following standards is MOST relevant for assurance over trust principles applicable to cloud security auditing?

Options :

A : ISO 27002

B : ISO 27001

C : SOC 2

D : SOC 1

Answer: C

Question 2

Which of the following is an example of financial business impact?

Options :

A :

A distributed denial of service (DDoS) attack renders the customer’s cloud inaccessible for 24 hours, resulting in millions in lost sales.

B : A hacker using a stolen administrator identity brings down the Software of a Service (SaaS)sales and marketing systems, resulting in the inability to process customer orders ormanage customer relationships.

C :

While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public, resulting in a loss of public confidence that led the board to replace all

Answer: A

Question 3

In a situation where duties related to cloud risk management and control are split between an organization and its cloud service providers, which of the following would BEST help to ensure a coordinated approach to risk and control processes?

Options :

A : Establishing a joint security operations center

B : Automating reporting of risk and control compliance

C : Co-locating compliance management specialists

D : Maintaining a centralized risk and controls dashboard

Answer: D

Question 4

Account design in the cloud should be driven by:

Options :

A : security requirements.

B : organizational structure.

C : business continuity policies.

D : management structure.

Answer: A

Question 5

Management planes deployed in cloud environments may pose a risk of potentially allowing access to the entire environment. Which of the following controls is MOST appropriate for mitigating this risk?

Options :

A : Regular audits

B : Increased monitoring

C : Change management

D : Access restriction

Answer: D